Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa
File:                     3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (raw, json)
Hash identifier:          ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=
Subject key identifier:   25:63:45:86:B0:0D:FE:FE:C8:19:6E:EE:DB:59:35:E9:28:0F:49:ED
Certificate issuer:       /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E
Certificate serial:       6FC29F28B3FA027A8D70A53FC7C42EA78A7EA274
Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa
Signing time:             Sun 03 May 2026 02:56:33 +0000
ROA not before:           Sun 03 May 2026 02:51:33 +0000
ROA not after:            Sun 02 May 2027 02:56:33 +0000
asID:                     152777
IP address blocks:        157.66.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl
                          rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c2:9f:28:b3:fa:02:7a:8d:70:a5:3f:c7:c4:2e:a7:8a:7e:a2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E
        Validity
            Not Before: May  3 02:51:33 2026 GMT
            Not After : May  2 02:56:33 2027 GMT
        Subject: CN=25634586B00DFEFEC8196EEEDB5935E9280F49ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:32:cf:f5:c8:f0:8b:2d:1e:4a:5b:09:ab:
                    6b:6c:e2:70:61:b4:dc:8e:bb:2f:a6:c5:1f:6b:6d:
                    40:dd:f6:73:f6:ad:e0:6d:cf:81:f3:7c:3a:f4:22:
                    e3:de:b7:3c:5c:ec:37:35:73:cc:f7:79:9b:d4:71:
                    b4:20:47:27:c5:03:da:b8:bc:b4:78:ab:a6:30:42:
                    84:84:ec:d6:74:f6:60:71:8a:d5:5a:6d:f1:e3:f0:
                    2b:ff:00:e6:4e:6a:88:86:f3:3e:c9:04:05:dd:60:
                    e2:e0:58:7a:7e:ca:e6:13:81:23:1a:10:e1:0f:b7:
                    fa:2a:ec:68:88:08:fe:a6:5a:f6:0a:12:0d:4d:01:
                    0d:b6:77:8a:d5:70:b8:17:a5:5c:bf:c6:5b:9d:a3:
                    21:af:2a:81:81:1a:03:19:b6:6a:a9:6d:da:5d:9c:
                    c1:9d:81:ce:ac:8d:ba:3a:be:1b:db:7c:ce:62:f2:
                    16:ac:6b:be:3e:99:3f:90:f6:2c:4b:0e:43:d5:a6:
                    f3:1e:4a:66:32:cc:d1:45:8b:2d:9c:c7:5d:45:8d:
                    05:bc:d7:e4:04:cb:40:84:9a:80:ea:28:f7:17:da:
                    9d:c9:f5:60:ef:d8:56:02:b9:56:fd:ab:22:64:78:
                    58:0a:18:78:aa:3e:78:2f:7d:21:c8:45:d4:fe:5b:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:45:86:B0:0D:FE:FE:C8:19:6E:EE:DB:59:35:E9:28:0F:49:ED
            X509v3 Authority Key Identifier:
                keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:12:4b:cd:5c:a2:ef:47:a9:12:c4:fa:22:b8:89:2f:40:dc:
         cf:bf:97:a8:07:14:fd:3e:93:2e:c9:05:aa:1c:26:ed:b9:b0:
         30:8f:82:5d:32:f0:a3:69:0b:40:27:9c:65:c4:d7:1c:85:d4:
         6f:d3:6b:39:5b:b8:0f:bd:69:a3:ae:2f:fa:03:13:5f:6b:7d:
         5a:ad:2f:21:0d:52:91:da:40:62:b4:33:6b:d3:2b:e6:ab:6d:
         5c:30:a9:99:f2:03:a0:cc:db:7e:62:db:85:13:c7:7f:26:b8:
         dd:4c:81:4a:46:95:e9:3c:bc:83:3c:97:c0:a3:37:92:f8:49:
         9d:6d:05:2b:9d:58:ab:5b:c8:f9:2d:e3:a5:54:a5:a9:99:c6:
         f7:37:c1:12:74:af:5e:85:a7:28:2d:46:6f:52:11:9a:91:89:
         78:ff:2d:e9:84:e3:5b:7c:b0:f9:81:10:d2:bc:b2:05:8f:b5:
         9b:b9:b7:2f:09:2c:0d:99:f5:cc:d5:00:c6:4f:10:76:53:cd:
         16:54:b2:0d:68:b5:40:f4:d0:0a:3d:a1:d6:10:1d:8c:c2:02:
         ff:5f:cd:2d:3f:32:e3:fb:fb:61:1f:ae:61:d2:e3:65:38:fd:
         db:8d:f3:58:8e:81:60:51:b6:3d:53:91:d4:75:bd:ed:ac:fe:
         43:c3:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:29 2026 by rpki-client